Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: piCAIH4UwB4ZkWaaV76SXz4LcBE+MPzLZZW1Lccjwr8=
Subject key identifier: 40:03:D8:38:CD:FD:66:52:E0:B6:3A:88:E9:51:69:9E:02:E8:BE:39
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 0197B632DBE7FFF60121E48D57E98F4E750A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0503
Signing time: Sat 28 Jun 2025 11:01:15 +0000
Manifest this update: Sat 28 Jun 2025 11:01:15 +0000
Manifest next update: Sun 29 Jun 2025 11:01:15 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: ge20ovSG8I9+TqFqdrtu/kz3lccYv1vdHERQyCtaTzU=)
2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:db:e7:ff:f6:01:21:e4:8d:57:e9:8f:4e:75:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Jun 28 11:01:15 2025 GMT
Not After : Jun 29 11:01:15 2025 GMT
Subject: CN=4003d838cdfd6652e0b63a88e951699e02e8be39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:12:c9:4f:8c:ba:4e:ce:c2:94:78:36:43:38:
32:ab:b7:c5:9a:3a:a5:49:41:fd:29:fa:b2:50:26:
7d:ed:1b:95:93:f5:c7:0d:07:bf:0c:b7:f2:59:04:
91:04:1d:23:fc:0f:50:9f:7d:fb:0b:e0:05:61:0d:
76:f0:53:44:e2:9f:eb:ed:76:44:71:ba:8c:65:14:
c8:93:92:5e:8a:ab:61:7c:14:70:94:3b:fd:bf:b7:
45:18:63:44:b3:ba:88:1c:06:7b:a0:1b:c5:03:35:
e8:a7:11:53:74:78:85:fa:9d:a8:74:ac:a1:b5:c7:
56:da:a1:35:95:19:15:8e:78:f4:ee:da:a2:8c:50:
5d:c6:2e:f2:4e:1d:37:9e:24:ea:b2:d7:b0:c0:b0:
82:d3:61:41:7b:03:18:cd:84:7f:cf:82:a1:a2:72:
6b:a4:55:d1:d6:8f:30:78:a6:f5:4f:e0:30:77:dc:
db:ce:c7:8f:ed:07:9b:51:50:75:36:63:22:58:53:
d0:7a:f6:12:d1:64:3b:7d:cf:d0:a5:20:fe:63:48:
5c:0a:9b:7a:44:cd:0b:5a:32:d2:05:69:a7:1f:40:
ec:98:c6:9a:72:30:95:02:e1:36:23:58:c1:64:63:
7c:aa:a1:b0:7d:24:46:44:3d:08:a4:e1:1b:6b:bf:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:03:D8:38:CD:FD:66:52:E0:B6:3A:88:E9:51:69:9E:02:E8:BE:39
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1a:bf:02:e7:fe:a3:42:b5:96:ff:17:4a:e2:52:c9:ff:c1:
50:98:06:ef:f6:cd:b2:ca:e0:70:7f:e4:5a:de:6e:99:fe:e1:
2b:8c:c8:29:4d:85:a2:66:ee:f4:0d:2b:d6:fe:66:56:42:b4:
05:e2:4b:b8:91:ed:dc:48:29:c1:1b:6d:b7:61:fd:b2:eb:1a:
25:8d:81:0a:2a:86:6b:95:01:ec:09:8a:78:0c:e9:c8:36:01:
97:53:a5:1d:9a:f6:24:12:11:05:b3:90:fe:03:01:b2:e1:23:
64:a7:dc:30:a9:fd:b5:65:78:9f:6d:cd:63:ea:15:56:99:17:
80:a0:fb:96:97:2c:66:c4:78:8d:6e:c0:91:e8:b4:f9:ff:7f:
7a:f7:1e:3c:ac:a9:22:dd:1e:37:6d:72:2d:25:83:d6:e1:2e:
ae:53:de:9c:a4:47:c0:02:03:42:f1:57:be:11:5d:7e:6e:85:
27:4f:c0:8b:59:0f:9f:32:d4:6c:7c:1d:9c:04:10:48:9d:ec:
16:ae:d3:ea:62:e2:fc:fb:db:36:87:14:75:ab:b2:d4:64:bf:
28:db:30:1e:5c:77:ec:2f:57:ff:a0:68:04:6c:64:49:a0:2c:
00:9e:92:cd:d2:02:25:14:76:2d:89:78:45:27:48:21:6f:b9:
a4:8c:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:36 2025 by rpki-client